• How to configure remote logging with rsyslog - Red Hat Customer Portal
  The write up kind of sucks, but this gets an rsyslog daemon going to receive messages from Cisco. Not apparent, but apparently 514 is the default port. The output is written to /var/log/messages
  in Unix Tips with cisco daemon hat logging messages red redhat remote rsyslog server

rsyslog from all users